CVEs published February 24, 2017
34 CVEs were published on February 24, 2017: 0 critical, 3 high.
- Published
- 34
- Critical
- 0
- High
- 3
- Medium
- 0
- Low
- 0
- Unrated
- 31
- Now in CISA KEV
- 0
- Fix available
- 3
Most affected products
- JustSystems Ichitaro
- 3
- plone
- 3
- IBM Jazz for Service Management
- 1
- IBM Tivoli Storage Manager
- 1
- IBM WebSphere MQ
- 1
High 3
- CVE-2017-2789When copying filedata into a buffer, JustSystems Ichitaro Office 2016 Trial will calculate two values to determine how much data to copy froJustSystems Ichitaro
- CVE-2017-2790When processing a record type of 0x3c from a Workbook stream from an Excel file (.xls), JustSystems Ichitaro Office trusts that the size is JustSystems Ichitaro
- CVE-2017-2791JustSystems Ichitaro 2016 Trial contains a vulnerability that exists when trying to open a specially crafted PowerPoint file.JustSystems Ichitaro
Medium, low and unrated 31
- CVE-2016-2226Integer overflow in the string_appends function in cplus-dem.c in libiberty allows remote attackers to execute arbitrary code via a crafted
- CVE-2016-4041Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to plone
- CVE-2016-4042Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors.plone
- CVE-2016-4043Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions toplone
- CVE-2016-4487Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted
- CVE-2016-4488Use-after-free vulnerability in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a crafted
- CVE-2016-4489Integer overflow in the gnu_special function in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash
- CVE-2016-4490Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash) via a cra
- CVE-2016-4491The d_print_comp function in cp-demangle.c in libiberty allows remote attackers to cause a denial of service (segmentation fault and crash)
- CVE-2016-4492Buffer overflow in the do_type function in cplus-dem.c in libiberty allows remote attackers to cause a denial of service (segmentation fault
- CVE-2016-4493The demangle_template_value_parm and do_hpacc_template_literal functions in cplus-dem.c in libiberty allow remote attackers to cause a denia
- CVE-2016-5027dwarf_form.c in libdwarf 20160115 allows remote attackers to cause a denial of service (crash) via a crafted elf file.
- CVE-2016-8998IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using aIBM Tivoli Storage Manager
- CVE-2016-9009IBM WebSphere MQ 8.0 could allow an authenticated user with authority to create a cluster object to cause a denial of service to MQ clusteriIBM WebSphere MQ
- CVE-2016-9975IBM Jazz for Service Management 1.1.2.1 and 1.1.3 is vulnerable to cross-site request forgery which could allow an attacker to execute malicIBM Jazz for Service Management
- CVE-2017-5669The do_shmat function in ipc/shm.c in the Linux kernel through 4.9.12 does not restrict the address calculated by a certain rounding operati
- CVE-2017-6196Multiple use-after-free vulnerabilities in the gx_image_enum_begin function in base/gxipixel.c in Ghostscript before ecceafe3abba2714ef9b432
- CVE-2017-6197The r_read_* functions in libr/include/r_endian.h in radare2 1.2.1 allow remote attackers to cause a denial of service (NULL pointer derefer
- CVE-2017-6298An issue was discovered in ytnef before 1.9.1.
- CVE-2017-6299An issue was discovered in ytnef before 1.9.1.
- CVE-2017-6300An issue was discovered in ytnef before 1.9.1.
- CVE-2017-6301An issue was discovered in ytnef before 1.9.1.
- CVE-2017-6302An issue was discovered in ytnef before 1.9.1.
- CVE-2017-6303An issue was discovered in ytnef before 1.9.1.
- CVE-2017-6304An issue was discovered in ytnef before 1.9.1.
- CVE-2017-6305An issue was discovered in ytnef before 1.9.1.
- CVE-2017-6306An issue was discovered in ytnef before 1.9.1.
- CVE-2017-6307An issue was discovered in tnef before 1.4.13.
- CVE-2017-6308An issue was discovered in tnef before 1.4.13.
- CVE-2017-6309An issue was discovered in tnef before 1.4.13.
- CVE-2017-6310An issue was discovered in tnef before 1.4.13.